Submit a ticketCall us

Get a crash course on Network Monitoring delivered right to your inbox
This free 7-day email course provides a primer to the philosophy, theory, and fundamental concepts involved in IT monitoring. Lessons will explain not only how to perform various monitoring tasks, but why and when you should use them. Sign up now.

Home > Success Center > Network Performance Monitor (NPM) > Agent deployment issue on the target server

Agent deployment issue on the target server

Updated May 24, 2017

Overview

The agent MSI installer was downloaded from the Orion Web Console and then installed on the target (monitored) server. The installation fails and automatically rolls back when the agent initiated option is selected. The installation is successful when the server initiated option is selected, but the agent shows as Unknown in the Orion Web Console.

The following error message is displayed when attempting to change the agent mode setting on the target (monitored) server:

Agent connected to Agent Management Service but provisioning has failed, error code [0x800706d9] - There are no more endpoints available from the endpoint manner. Failed to create certificate.

Environment

NPM 12.0 SR1 on a hardened environment

Cause 

The issue is caused by permissions on the Orion server that are preventing NPM from provisioning the certificates.

Resolution

  1. Do any of the following changes:
    • There are security policies applied to the cryptographic services on the machine. Check the defined value of the System cryptography: Force strong key protection for user keys stored on the computer group policy. Change the value as needed.
    • Stop the CNG Key Isolation service. Set the state to manual start, and then enable the service.
    • Go to C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys and temporarily grant full access to Everyone.
  2. When any of the changes are done, restart the SolarWinds Orion Module Engine service.
  3. After two minutes, open the AgentManagement.Service.log file (C:\ProgramData\SolarWinds\Logs\AgentManagement\AgentManagement.Service.log). The issue is resolved if the Error generating provisioning certificate message is not visible in the log.
  4. Redeploy the agent.

 

Last modified
20:19, 6 Jun 2017

Tags

Classifications

Public